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Bid requests: Data fields 


e Bid request IDs 

e Site/app details 

e Impression details 
e Video details 

e Publisher details 

e Content details 

e Device information 
e Geo-location 

e User information 
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Bid requests: The special category data issue 
GDPR Article 9(1): 


“Processing of personal data revealing racial or 
ethnic origin political opinions religious or 
philosophical beliefs or trade union membership 
and the processing of genetic data, biometric data 
for the purpose of uniquely identifying a natural 
person, data concerning health or data concerning a 
natural person's sex life or sexual orientation shall 
be prohibited”. 
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A dilemma 
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Potential solutions? 


e Strip out personal data? 
e Remove content ‘taxonomies’? — 


e Apply anoymisation 
techniques? 


e Disguise/mask URLs? 
e Obtain explicit consent? 
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Bid request data fields: Key questions 


1. What is the minimum amount of user data required within 
RTB bid requests? 


2. To what extent is data that could reveal sensitive 
information about users actually required within bid 
requests? 


3. What are the key considerations when determining which 
data fields to include within bid requests? 


4. What is the scope for removing personal data, including 
special category data, from bid requests? 
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